15 messages in net.sourceforge.lists.courier-usersRe: [courier-users] Re: smtp auth wit...
FromSent OnAttachments
Armin FuerstSep 24, 2001 5:15 am 
Roland SchneiderSep 24, 2001 7:49 am 
Sam VarshavchikSep 24, 2001 2:50 pm 
Armin FuerstSep 24, 2001 11:37 pm 
Armin FuerstSep 25, 2001 12:01 am 
Alex TitovSep 25, 2001 12:36 am 
Armin FuerstSep 25, 2001 1:40 am 
Armin FuerstSep 25, 2001 1:58 am 
Alex TitovSep 25, 2001 2:37 am 
Armin FuerstSep 25, 2001 2:46 am 
Alex TitovSep 25, 2001 3:29 am 
Sam VarshavchikSep 25, 2001 4:52 am 
Armin FuerstSep 25, 2001 7:55 am 
Sam VarshavchikSep 25, 2001 2:44 pm 
Armin FuerstSep 25, 2001 11:48 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [courier-users] Re: smtp auth with cram-md5Actions...
From:Armin Fuerst (arm@cogidata.com)
Date:Sep 25, 2001 1:40:39 am
List:net.sourceforge.lists.courier-users

it seems, you didn't send your second answer to the mailing-list, so i'll make one mail out of it...

It seems that you don't have cram support compiled at all. I ran into it when I installed MySQL authentication. Make sure you have authcram module compiled in. It is necessary to be compiled though you may not use it directly later.

authinfo gives: AUTHENTICATION_MODULES="authdaemon" AUTHDAEMONMODULELIST="authcustom authcram authuserdb authshadow authpwd" SASL_AUTHENTICATION_MODULES="CRAM-SHA1 CRAM-MD5 PLAIN LOGIN"

Courier must know creartext password to implement cram-md5 auth. Of course there are no creartext passwords being transmitted over network.

i hope that's what you are asking: the authdaemon-processes running are all: /usr/lib/courier/libexec/authlib/authdaemond.plain

It all depens on what auth modules you use. If you use authpaswd or authshadow - there are no any way to put cleartext passwords there.

authuserdb (but you need to use authcram instead of authuserdb), authldap and authmysql are suitable for that.

i'm a bit confused about misc. auth-modules, because i have the feeling that different things are mixed up: * authentication databases: userdb is a database used for authentication. to my feeling, this should be independent to encrypthion methods: * authentication methods: cram-md5 is an encryption algorithm, independent from where the authentication data comes from.

so cram-md5 shouldn't contradict userdb. or did i misunderstand that completely?

But according your sniff it was compiled.

It seems for me (according to sniff) that the problem is your auth modules don't support (or configured to support) cleartext passwords.

What auth modules do you have (authinfo output) and use (authmodulelist value in etc/authdaemonrc) ?

(repeated from above): $ authlib/authinfo AUTHENTICATION_MODULES="authdaemon" AUTHDAEMONMODULELIST="authcustom authcram authuserdb authshadow authpwd" SASL_AUTHENTICATION_MODULES="CRAM-SHA1 CRAM-MD5 PLAIN LOGIN"

$ grep authmodulelist authdaemonrc ##NAME: authmodulelist:0 authmodulelist="authcustom authcram authuserdb authshadow authpwd" ##NAME: authmodulelistorig:0 authmodulelistorig="authcustom authcram authuserdb authshadow authpwd"

i don't think i've changed anything in this list...

armin